<?php

/**

* This file implements the File view (including resizing of images)

*

* This file is part of the evoCore framework - {@link http://evocore.net/}

* See also {@link https://github.com/b2evolution/b2evolution}.

*

* @license GNU GPL v2 - {@link http://b2evolution.net/about/gnu-gpl-license}

*

* @copyright (c)2003-2020 by Francois Planque - {@link http://fplanque.com/}

* Parts of this file are copyright (c)2005-2006 by PROGIDISTRI - {@link http://progidistri.com/}.

*

* @package htsrv

*

* @todo dh> Add support for ETag / If-Modified-Since. Maybe send "Expires", too? (to "force" caching)

* fp> for more efficient caching (like creating a thumbnail on view 1 then displaying the thumbnail again on view 2), this should probably redirect to the static file right after creating it (when $public_access_to_media=true OF COURSE)

* dh> this would add another redirect/HTTP request and no cache handling, assuming

* that the server is not configured for smart caching.

* Additionally, it does not help for non-public access, which is the meat of this file.

* I've added "Expires: in ten years" now, but not for thumbs (see comment there).

*/

/**

* Load config, init and get the {@link $mode mode param}.

*/

require_once dirname(__FILE__).'/../conf/_config.php';

require_once $inc_path.'/_main.inc.php';

// Don't check new updates from b2evolution.net (@see b2evonet_get_updates()),

// in order to don't break the response data:

$allow_evo_stats = false;

if( ! isset($GLOBALS['files_Module']) )

{

debug_die( 'Files module is disabled or missing!' );

}

if( param( 'abspath', 'string', NULL ) !== NULL )

{ // If absolute path is requested then try to decode it to root and relative path:

if( $decoded_data = get_root_path_by_abspath( $abspath, true ) )

{ // Root and path are decoded, Use them:

set_param( 'root', $decoded_data['root'] );

set_param( 'path', $decoded_data['path'] );

}

}

// We need this param early to check blog perms, if possible

param( 'root', 'string', true ); // the root directory from the dropdown box (user_X or blog_X; X is ID - 'user' for current user (default))

// Check permission:

if( ! $public_access_to_media )

{

if( ! isset($current_User) )

{

debug_die( 'No permission to get file (not logged in)!', array('status'=>'403 Forbidden') );

}

// fp> I don't think we need the following if public_access_to_media

if( preg_match( '/^collection_(\d+)$/', $root, $perm_blog ) )

{ // OK, we got a blog ID:

$perm_blog = $perm_blog[1];

}

else

{ // No blog ID, we will check the global group perm

$perm_blog = NULL;

}

//pre_dump( $perm_blog );

// Check permission (#2):

check_user_perm( 'files', 'view', true, $perm_blog );

}

// Load the other params:

param( 'path', 'filepath', true );

param( 'size', 'string', NULL ); // Can be used for images.

param( 'size_x', 'integer', 1 ); // Ratio size, can be 1, 2 and etc.

param( 'mtime', 'integer', 0 ); // used for unique URLs (that never expire).

if( $size_x != 1 && $size_x != 2 )

{ // Allow only 1x and 2x sizes, in order to avoid hack that creates many x versions

$size_x = 1;

}

// Load fileroot info:

$FileRootCache = & get_FileRootCache();

$FileRoot = & $FileRootCache->get_by_ID( $root );

// Load file object (not the file content):

$File = new File( $FileRoot->type, $FileRoot->in_type_ID, $path );

// Check if the request has an If-Modified-Since date

if( array_key_exists( 'HTTP_IF_MODIFIED_SINCE', $_SERVER ) )

{

$if_modified_since = strtotime( preg_replace('/;.*$/','',$_SERVER['HTTP_IF_MODIFIED_SINCE']) );

$file_lastmode_ts = $File->get_lastmod_ts();

if( $file_lastmode_ts <= $if_modified_since )

{ // file was not modified since if_modified_since ts

header_http_response( '304 Not Modified' );

exit(0);

}

}

$File->load_meta();

if( $File->is_image() && !$File->exists() )

{ // Original image file is not found, output a black thumbnail:

global $thumbnail_sizes;

load_funcs( '/files/model/_image.funcs.php' );

$thumb_width = NULL;

$thumb_height = NULL;

$size_name = $size;

if( ! empty( $size_name ) )

{

$thumb_path = $File->get_af_thumb_path( $size_name, NULL, true );

if( substr( $thumb_path, 0, 1 ) != '!' && ( $size_arr = imgsize( $thumb_path, 'widthheight_assoc' ) ) )

{

$size_arr = imgsize( $thumb_path, 'widthheight_assoc' );

$thumb_width = $size_arr['width'];

$thumb_height = $size_arr['height'];

}

}

output_error_thumb( '!Original not found.', $thumb_width, $thumb_height );

}

elseif( ! empty( $size ) && $File->is_image() )

{ // We want a thumbnail:

// fp> TODO: for more efficient caching, this should probably redirect to the static file right after creating it (when $public_access_to_media=true OF COURSE)

global $thumbnail_sizes;

load_funcs( '/files/model/_image.funcs.php' );

$size_name = $size;

if( ! isset( $thumbnail_sizes[$size] ) )

{ // this file size alias is not defined, use default:

// TODO: dh> this causes links for e.g. "fit-50x50" to work also, but with the drawback of images not getting served from the

// .evocache directory directly. I think invalid $size params should bark out here.

// fp> ok.

$size_name = 'fit-80x80';

}

if( ! isset ( $thumbnail_sizes[$size_name][4] ) )

{ // Set blur percent in 0 by default

$thumbnail_sizes[$size_name][4] = 0;

}

// Set all params for requested size:

list( $thumb_type, $thumb_width, $thumb_height, $thumb_quality, $thumb_percent_blur ) = $thumbnail_sizes[$size_name];

$Filetype = & $File->get_Filetype();

// pre_dump( $Filetype );

// TODO: dh> Filetype may be NULL here! see also r1.18 (IIRC)

$mimetype = $Filetype->mimetype;

// pre_dump( $mimetype );

// Try to output the cached thumbnail:

$err = $File->output_cached_thumb( $size_name, $mimetype, $mtime, $size_x );

//pre_dump( $err );

if( $err == '!Thumbnail not found in'.$Settings->get( 'evocache_foldername' ) )

{ // The thumbnail wasn't already in the cache, try to generate and cache it now:

$err = NULL; // Short error code

list( $src_width, $src_height ) = imgsize( $File->get_full_path() );

if( ! $resample_all_images && check_thumbnail_sizes( $thumb_type, $thumb_width, $thumb_height, $src_width, $src_height ) )

{ // There is no need to resample, use original!

$err = $File->get_af_thumb_path( $size_name, $mimetype, true, $size_x );

if( $err[0] != '!' && @copy( $File->get_full_path(), $err ) )

{ // File was saved. Ouput that same file immediately:

// note: @copy returns FALSE on failure, if not muted it'll print the error on screen

$err = $File->output_cached_thumb( $size_name, $mimetype, $mtime, $size_x );

}

}

else

{ // Resample

list( $err, $src_imh ) = load_image( $File->get_full_path(), $mimetype );

if( empty( $err ) )

{

list( $err, $dest_imh ) = generate_thumb( $src_imh, $thumb_type, $thumb_width, $thumb_height, $thumb_percent_blur, $size_x );

if( empty( $err ) )

{

$err = $File->save_thumb_to_cache( $dest_imh, $size_name, $mimetype, $thumb_quality, $size_x );

if( empty( $err ) )

{ // File was saved. Ouput that same file immediately:

// This is probably better than recompressing the memory image..

$err = $File->output_cached_thumb( $size_name, $mimetype, $mtime, $size_x );

}

else

{ // File could not be saved.

// fp> We might want to output dynamically...

// $err = output_image( $dest_imh, $mimetype );

}

}

}

}

}

// ERROR IMAGE

if( !empty( $err ) )

{ // Generate an error image and try to squeeze an error message inside:

output_error_thumb( $err, $thumb_width, $thumb_height );

}

}

else

{ // We want the regular file:

// Headers to display the file directly in the browser

if( ! is_readable($File->get_full_path()) )

{

debug_die( sprintf('File "%s" is not readable!', rel_path_to_base($File->get_full_path())) );

}

$Filetype = & $File->get_Filetype();

if( ! empty($Filetype) )

{

header('Content-type: '.$Filetype->mimetype );

if( $Filetype->viewtype == 'download' )

{

header('Content-disposition: attachment; filename="'

.addcslashes($File->get_name(), '\\"').'"' ); // escape quotes and slashes, according to RFC

}

}

$file_path = $File->get_full_path();

header('Content-Length: '.filesize( $file_path ) );

// The URL refers to this specific file, therefore we can tell the browser that

// it does not expire anytime soon.

// fp> I don't think mtime changes anything to the cacheability of the data

// if( $mtime && $mtime == $File->get_lastmod_ts() ) // TODO: dh> use salt here?! fp>what for?

header_noexpire(); // static file

// Display the content of the file

readfile( $file_path );

}

?>